Senior Microsoft 365 Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the Microsoft 365 platform at WellStreet.

• Develop a sensitivity label taxonomy and Data Loss Prevention (DLP) policies across Exchange, SharePoint, and Teams.

• Design and oversee Entra ID management, encompassing Conditional Access, hybrid identity, privileged access, password protection, Self-Service Password Reset (SSPR), and access reviews.

• Set up and maintain Intune across Windows, macOS, iOS, and Android, including compliance and configuration profiles, security baselines, Autopilot, update rings, and app packaging.

• Oversee the configuration of Exchange Online, Teams, and SharePoint tenant, including mail flow and transport rules.

• Configure Purview DLP, sensitivity labeling, retention, auditing, eDiscovery, and HIPAA/HITRUST control mapping.

• Implement and manage Single Sign-On (SSO) and System for Cross-domain Identity Management (SCIM) across enterprise applications.

• Manage Defender endpoint detection and response, Defender for Office 365 anti-phishing and threat investigation, and unified M365 alerting.

• Assess Common Vulnerabilities and Exposures (CVEs) from SecOps, track remediation, and generate weekly reports.

• Maintain a precise application catalog, efficient runbooks, vendor SLAs, and Business Associate Agreements (BAAs).

• Build version-controlled, API-driven M365 management in an Azure DevOps repository utilizing Microsoft Graph and PowerShell, employing app-only authentication and Key Vault.

• Utilize Python or declarative tools where applicable.

• Review AI-assisted tasks prior to their impact on tenants holding Protected Health Information (PHI).

⛳️ Requirements

• A minimum of five years in M365, identity, or security engineering.

• In-depth knowledge of Entra ID and Intune at the tenant level.

• Hands-on experience configuring Purview, including DLP policies, labeling, retention, and eDiscovery.

• Proficiency in Microsoft Graph and PowerShell; automation is a priority, with experience in API development.

• Knowledge of Python is advantageous.

• Familiarity with version control practices, including typical use of branches and pull requests.

• Experience with HIPAA, HITRUST, SOC 2, or PCI, with the ability to articulate controls.

• Daily utilization of AI and sound judgment regarding what needs review before affecting tenants holding PHI.

• Familiarity with Terraform, Bicep, or Azure DevOps pipelines is preferred.

• Exposure to declarative M365 management, including Microsoft365DSC, a Terraform M365 provider, or Graph Tenant Configuration Management APIs is a plus.

• Background in Healthcare IT is beneficial.

• Experience managing a vulnerability or patch compliance program is advantageous.

• Familiarity with FreshService or comparable IT Service Management (ITSM) tools is preferred.

• ITIL v4 certification is a plus.

• Certifications such as SC-200, SC-300, SC-400, MS-102, or MD-102 are desirable.

🏝️ Benefits

• Full-time remote work opportunity.

• Genuine platform ownership with the freedom and responsibility to build an engineering practice.

• Chance to establish standards for version control, review, and automation.

• Opportunity to become a clear leader as more engineers join the team.

• Utilize AI within engineering, administration, and documentation efforts.